Passkeys: articles and guides

Run a Google Account Security Checkup: devices, 2-Step Verification, passkeys, recovery info, linked apps, saved passwords and Gmail forwarding.

Strong login, alerts, fake fraud-team calls, fake apps, public Wi-Fi and the first steps after a bad transfer, with US, UK and Australian sources.

Your password was leaked. Steps in order: change it, stop reuse, turn on MFA, check for exposure and watch for credential stuffing and phishing.

FIDO2 and passkeys give the workforce phishing-resistant sign-in that is also faster and easier than passwords. The security, productivity and cost benefits, and how to realise them.

NIS2 doesn't name FIDO2, but Article 21 requires MFA where appropriate, and FIDO2 passkeys and security keys meet its phishing-resistant end. Rollout order.

DORA does not mandate FIDO2, but requires strong authentication and robust IAM. FIDO2 hardware keys support that for privileged access to financial systems.

Passkeys and FIDO2 hardware security keys are both WebAuthn credentials, but they differ in portability, assurance and where they belong. A clear comparison and when to use each.